Cybersecurity Compliance Support (NIST SP 800-171)

This contract supports the implementation of NIST SP 800-171 controls and full compliance with DFARS 252.204-7012 to safeguard covered defense information within the subcontractor environment. The work involves executing a comprehensive cybersecurity posture improvement plan that includes assessing existing systems, identifying gaps in current controls, and developing and documenting remediation strategies aligned with federal standards. The contractor will perform a formal self-assessment of cybersecurity safeguards, generate required documentation to demonstrate compliance, and maintain records to support audit readiness and ongoing adherence to defense information protection requirements. The scope is focused on technical and administrative support to ensure all systems handling covered defense information meet NIST and DFARS mandates, with performance centered at Hill Air Force Base, Utah, under the Department of Defense’s Active Devices Division. The subcontract is solicited under NAICS code 541512 for computer systems design services and requires prompt response by the deadline of July 24, 2026. Success in this effort will involve delivering verifiable, auditable evidence that cybersecurity controls are properly implemented and continuously maintained to protect sensitive defense data from unauthorized access or exposure.